Skip to content

Vendor

Cradle vulnerabilities

1 published CVE affecting Cradle, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0
Atom feed of Cradle alerts

Products

Latest Cradle CVEs

Newest publication first

  1. CVE-2026-3318 Multiple vulnerabilities in Cradle e-commerce

    Published
    MediumCVSS 5.3 EPSS 0.34%

    Open redirection vulnerability in the latest demo version of the Cradle eCommerce platform. The vulnerability occurs in the login form endpoint, where the ‘returnUrl’ parameter allows redirection because the web application accepts a URL as a parameter without properly validating...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.